Able Palacios

OT Reality Check: Active discovery isn’t “controversial.” It’s foundational. Stop letting vendors fearmonger you into inaction. The Joint Cyber Defense Collaborative (yes, the one with CISA, NSA, DOE, and more) just released their “Foundations for OT Cybersecurity” guide. And what do they say, loud and clear? “Accurate, complete, and timely asset inventory is foundational to risk-based decision-making.” “Asset discovery should use both passive and active methods as appropriate.” That last part? It’s where the industry narrative starts to fall apart. 🚫 “As appropriate” does not mean “never.” 🚫 It does not mean “wait for your IDS to guess what you have.” 🚫 It does not mean “keep buying more sensors.” ✅ It means talk to your devices in their native protocols and get the real answers. Here’s the truth: • Your PLCs and switches are designed to respond to their own protocol queries. • Active discovery is not dangerous. If your device crashes when asked “What’s your name?” in its own language, you’ve got bigger problems than discovery. • Some of the world’s largest manufacturers trust OTbase to run full active discovery on their OT networks—every single day. The only reason active discovery has been vilified is because certain vendors can’t do it. So they spread fear, uncertainty, and doubt to keep you buying what they do sell: expensive detection and pretty dashboards with incomplete data. Active > passive. Always. And combining both? That’s just layering bad data on missing data and calling it “context.” 🧠 You don’t need more noise. You need clarity. Schedule a 15-minute micro demo to see what a real OT asset inventory looks like: https://lnkd.in/e8RbYFHQ #assetinventory #operationaltechnology #cybersecurity #activediscovery #passivediscovery #JCDC #OTbase #networkvisibility #ICSsecurity #OTsecurity

8

1 Comment

K-12 Cybersecurity Insider | 8/11/2025 In this edition: * Ohio Enacts Cybersecurity Regulations for Schools * Federal Cyber Grant Funds for State, Local Cybersecurity Released * Smart ‘Vape’ Sensor Widely Deployed in Schools Vulnerable to Hacking Read more and sign up to get it delivered straight to your inbox: https://lnkd.in/eV4guZj4 #edtech #edusec K12 SIX

27

1 Comment

Hackers accessed Social Security numbers, state IDs, and license plate numbers - 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 𝗯𝗿𝗲𝗮𝗰𝗵 𝗮𝗳𝗳𝗲𝗰𝘁𝗶𝗻𝗴 𝗺𝗼𝗿𝗲 𝗿𝗲𝘀𝗶𝗱𝗲𝗻𝘁𝘀 𝘁𝗵𝗮𝗻 𝗦𝗵𝗲𝗯𝗼𝘆𝗴𝗮𝗻'𝘀 𝗽𝗼𝗽𝘂𝗹𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝟱𝟬,𝟬𝟬𝟬. The Chort ransomware gang continues to target government and educational institutions, as widespread vulnerabilities are prevalent in this space. https://lnkd.in/gkUiyTDT

13

Optimize your monitoring strategy by choosing the right threshold types to detect anomalies effectively and reduce noise. Splunk Lantern's Choosing the right threshold types shows you how to learn how to tailor your thresholds for better ITSI insights and efficiency: https://splk.it/4qZo7iu

41

2 Comments

If you can’t trust data, you can’t move MSSP performance. In this new piece, Timothy Hudgins breaks down the data disciplines; engineering, management, and analytics, that enable targeted outreach and predictable results. CHS’s ARC platform powers these capabilities to drive measurable impact. 📈 Read more here: https://lnkd.in/gtnUvRrR #MSSP #HealthcareAnalytics #ACO #ValueBasedCare

9

The most effective prospecting doesn't happen in a boardroom, it happens where people can build dynamic relationships. That’s what I saw with Rick Irvine from West Michigan Technology Services Services at a golf outing. Using The Cyber Score, he was able to go from a simple handshake to an "on-the-spot" diagnosis, showing local business owners the exact number of their company’s exposed credentials on the Dark Web. The most powerful part? That single data point creates more urgency and trust than any sales pitch ever could. It’s an incredible way for an MSP to transform a casual event into a pipeline of qualified leads.

13

🚨 What happens when ransomware hits a hospital? Lives — not just data — are on the line. This week on #SpeedData, J.D. Whitlock, CIO at Dayton Children's Hospital, shares how his team prepares for the inevitable and minimizes damage when ransomware strikes. 🛡️ “You’re never going to stop the bad guys from getting over that first wall,” J.D. says. “So we do everything we can to keep the bad guys out of the family jewels." Tune in to hear how Dayton Children’s: ✔ Stays resilient in the face of ransomware ✔ Defends critical systems beyond MFA ✔ Keeps care uninterrupted—even under attack 💻 Watch now: https://lnkd.in/gbmWh3-8 #CyberResilience #DataSecurity #CIO

8

What happens when cybersecurity meets community? Fortra is proud to be featured in the Minnesota Technology Association’s Membership Spotlight. From AI-powered threat detection to our commitment to Minnesota’s tech ecosystem, we’re building a safer future together. We talk about:  🔹 Why a unified security approach matters  🔹 How AI is changing cyber defense  🔹 What inspires us in the Minnesota tech community    📖 Read the full spotlight: https://lnkd.in/gq7dCRYj 

23

Your security strategy isn’t broken…  …it’s just outdated. This Nutanix Executive Masterclass unpacks how AI, 5G, and global supply chain risks are rewriting the cybersecurity playbook. Learn how real CISOs are responding: https://ntnx.com/3HCXCxU

46

1 Comment

FOR IMMEDIATE RELEASE Lionfish Cyber Security and Ball State University Pioneer Revolutionary Statewide Program to Protect Indiana's Critical Infrastructure Groundbreaking "By, With, and Through" Partnership Transforms Students into Cyber Guardians, Successfully Completes First Infrastructure Assessment at Gaston Water Works INDIANAPOLIS, IN – July 8, 2025 – Lionfish Cyber Security, a mission-driven, disabled veteran-owned cybersecurity firm, today announced the successful completion of its first critical infrastructure security assessment in partnership with Ball State University. The assessment—conducted by Ball State students at Gaston Water Works public water facility—marks the official launch of a groundbreaking statewide initiative to protect Indiana’s essential services through university-led cybersecurity programs. The groundbreaking program, inspired by U.S. Army Green Beret methodology, deploys trained university students as "Cyber Guardians" to assess and strengthen cybersecurity defenses at water treatment facilities, power grids, and local government systems across Indiana. Eight undergraduate and graduate students from Ball State University's Center for Information and Communication Sciences (CICS) conducted the comprehensive security evaluation under the mentorship of cybersecurity professionals. "Water treatment facilities are increasingly becoming targets for cyberattacks, with incidents reported across the nation in recent years," said Dr. David Hua, Associate Director of the Center for Information and Communication Sciences at Ball State University. "This partnership represents a proactive approach to infrastructure protection that benefits everyone involved—students gain invaluable real-world experience, facilities receive professional-grade security assessments, and Indiana's critical infrastructure becomes more resilient." Transforming Education into Action meaningful, hands-on training opportunities; students develop the practical skills employers demand; and our critical infrastructure becomes more resilient against the escalating threat of cyberattacks. Most importantly, Indiana advances the intent of newly enacted laws like SB 472 and SB 459—helping protect the families, businesses, and communities we’re all committed to defending.” With the national cybersecurity workforce gap now exceeding 450,000 unfilled positions, we simply don’t have enough people to protect what matters most. But this ‘by, with, and through’ methodology works. It mobilizes local talent at scale, embeds them where they're needed most, and builds lasting capability from the inside out. To read the rest please go to https://lnkd.in/gzMUkX_Z Thank you this would not have been possible without your help. Gaston Water Works, Ray Gillespie Ball State Team Dr. Firoz Khan, PhD Dr. David Hua Joel Wiredu Lionfish Team Dr. Shadi Jawhar Diane M. Janosek, PhD, Esq. Ryan J. Bardes Craig K

55

12 Comments

Lots of SCs get frustrated when AEs don’t intro them. But let’s be honest — Lots of SCs don't fully leveraging the intro when they do get one. Remember - even within the Presales community, we don’t fully understand each other’s titles. Assume your SC/SE/SA title tells them NOTHING! Instead, give them your elevator pitch: ✅ What you are ✅ What that actually means ✅ Why you’re here ✅ A little something memorable Not only does this frame your role clearly — It also primes the room for WHY you’re about to ask 47 million questions in the remaining 58 minutes of yet another Zoom call. On my Diary of a Sales Engineer episode, Sameer, Ryan, and I swapped SC elevator pitches. Here’s what mine looked like when I was a Fintech SC: “Hi, I’m Alice Egan, Senior Solutions Consultant. I’m a [product] and tech ecosystem expert. I’m here to make sure our solution is the best fit for you by really understanding what you’re trying to solve, what you need to connect to, and why. Also yes - American accent but I'm in two years deep working with London fintech, so I've probably seen your exact use case before." ✅ Title ✅ What that actually means ✅ Value ✅ Something memorable ✅ Street cred Bonus tip? Bring a lil' background into it. Former paralegal now selling legal software? Say it. Former Hill staffer now selling to PubSec? Lead with it. Former support agent turned SC at Zendesk? I often started with that. Buyers don’t care about your title. They care about trust. Relevance. Connection. Your intro is your chance to create that. So… what’s your elevator pitch? 👇

37

11 Comments

Attackers aren't slowing down, and neither should your defenses. Our July Vulnerability Review covers the latest high-risk CVEs, active exploits, and what they mean for MSPs managing client environments. Understand the risks. Prioritize the right fixes: https://hubs.ly/Q03BSn1B0 #Cybersecurity #MSP #VulnerabilityManagement #ThreatIntel #BlackpointCyber

21